Intelligence Analysis for Law Enforcement Training Course

Participants can convert operational concerns into prioritised intelligence requirements and collection tasks.

• Decision-focused intelligence requirements convert command concerns into answerable collection questions
• Key intelligence questions identify actors, capabilities, intent, opportunity and indicators
• Priority scoring weighs threat, harm, urgency, feasibility and information availability
• Collection plans assign sources, owners, deadlines, safeguards and reporting routes
• Requirements matrices expose assumptions, unknowns, dependencies and decision consequences
• Tasking meetings record actions, escalation thresholds and collection performance measures

Participants can apply legal, ethical and information-governance controls to intelligence activity.

• Legal authorities, necessity and proportionality govern intelligence collection decisions
• Human rights, privacy and data-protection duties shape handling boundaries
• Purpose limitation and data minimisation reduce unjustified personal-data retention
• Handling codes classify sensitivity, source protection and dissemination restrictions
• Disclosure obligations separate intelligence development from evidential case preparation
• Audit trails document authorisation, access, amendments, retention and deletion decisions

Participants can evaluate reporting quality, record caveats and communicate confidence accurately.

• Source reliability and information validity are assessed separately before use
• 5x5x5 grading records source reliability, information accuracy and handling limits
• Corroboration compares independent reporting, records, digital traces and witness accounts
• Deception indicators test motive, access, consistency, specificity and timing
• Confidence statements distinguish confirmed facts, assessed judgements and unverified allegations
• Source registers capture provenance, contact history, access and risk controls

Participants can manage targeted intelligence collection while protecting sources and information rights.

• Collection disciplines combine open-source, police records, partner reporting and human sources
• Open-source intelligence preserves URLs, timestamps, screenshots and retrieval metadata
• Records checks target entities, locations, vehicles, communications and financial activity
• Collection management avoids duplication, protects sources and closes priority gaps
• Requests to partners define legal basis, purpose, urgency and return format
• Collection logs track task status, results, caveats and follow-up actions

Participants can test alternative explanations and make transparent analytical judgements.

• Analysis of Competing Hypotheses tests rival explanations against available evidence
• Key Assumptions Check identifies beliefs requiring validation before operational decisions
• Indicators and warnings distinguish normal patterns from emerging threat signals
• Timeline analysis orders events, gaps, triggers and competing accounts
• Analysis matrices separate facts, inferences, assumptions, confidence and intelligence gaps
• Alternative futures identify plausible developments, signposts and contingency requirements

Participants can identify relationships, patterns and priority actors within intelligence holdings.

• Association matrices organise persons, entities, events, locations and communications
• Link charts distinguish confirmed relationships, reported associations and analytical hypotheses
• Telephone analysis identifies contact frequency, common associates and temporal patterns
• Financial-flow mapping traces payments, beneficiaries, intermediaries and suspicious transaction sequences
• Geospatial pattern analysis compares incidents, hotspots, routes and vulnerable locations
• Network centrality measures identify brokers, hubs, clusters and isolated actors

Participants can create intelligence assessments that support prevention, safeguarding and enforcement decisions.

• Threat assessments combine intent, capability, opportunity, vulnerability and consequence
• Risk matrices distinguish likelihood, impact, uncertainty and control effectiveness
• Problem profiles define offenders, victims, methods, places, enablers and harms
• Strategic assessments identify trends, drivers, future demands and resource implications
• Operational assessments support targeting, disruption options and safeguarding decisions
• Tactical assessments inform deployments, surveillance priorities and immediate risk management

Participants can write and brief intelligence products suited to defined decision-makers.

• Intelligence reports state purpose, key judgements, evidence, confidence and implications
• BLUF writing presents the main judgement before supporting detail
• Source citations preserve traceability while protecting identities and sensitive methods
• Visual products use timelines, maps and charts without overstating certainty
• Briefing structures match operational urgency, seniority, decision rights and attention span
• Dissemination plans apply need-to-know, handling caveats, recipients and feedback channels

Participants can review intelligence performance and plan practical improvements for their unit.

• Tasking and coordination processes convert assessments into accountable operational actions
• Decision logs record accepted risks, rationales, owners and review dates
• Performance measures test timeliness, relevance, accuracy, impact and customer satisfaction
• After-action reviews examine intelligence contribution, missed indicators, decisions and outcomes
• Intelligence development plans prioritise skills, data access, governance and partnerships
• Personal application plans set workplace actions, sponsors, milestones and evidence